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Abstract — In this paper, we study properties of rank metric 
codes in general and maximum rank distance (MRD) codes 
in particular. For codes with the rank metric, we first estab- 
lish Gilbert and sphere-packing bounds, and then obtain the 
asymptotic forms of these two bounds and the Singleton bound. 
Based on the asymptotic bounds, we observe that asymptotically 
Gilbert- Varsharmov bound is exceeded by MRD codes and 
sphere-packing bound cannot be attained. We also establish 
bounds on the rank covering radius of maximal codes, and show 
that all MRD codes are maximal codes and all the MRD codes 
known so far achieve the maximum rank covering radius. 

I. Introduction 

Early in the development of coding theory, it was found 
convenient to model communication channels as conveyors of 
symbols from finite sets and represent the effects of channel 
noise by occasional reception of a symbol other than the 
transmitted symbol. Thus, the Hamming metric has been 
considered the most relevant metric for error-control codes. 
Recently, the rank metric has attracted some attention due 
to its relevance to wireless communications [1] and storage 
equipments [2]. In [3], space-time block codes with good rank 
properties have been proposed. Rank metric codes are used 
to correct crisscross errors that can be found in memory chip 
arrays and magnetic tapes [2]. Codes with the rank metric have 
also been used in the Gabidulin-Paramonov-Tretjakov (GPT) 
public-key cryptosystem [4] and its variants (see, for example, 
[5], [6]). The public -key cryptosystems based on codes with 
the rank metric have much smaller public key sizes than those 
for Hamming metric based public -key cryptosystems such as 
McEliece's cryptosystem [7]. 

Due to these potential applications, general properties of 
codes with the rank metric have received some attention [2], 
[8]-[14]. The rank metric was considered as a metric for block 
codes over extension fields in [8], whereas in [2] the rank 
metric was considered for array codes that consist of arrays 
over base fields. However, in both [8] and [2], the same family 
of codes that are optimal in the metric sense were proposed. 
In [10], the rank distance properties of primitive length linear 
cyclic codes were studied. In [11], the rank covering radius of 
codes is studied, and the sphere-covering bound for the rank 
metric is introduced. The concept of rank covering radius is 
generalized in [12], where the multi-covering radii of codes 
with the rank metric are defined. Recently, a somewhat more 
general construction for MRD codes was proposed in [15], 
and the properties of subspace subcodes and subfield subcodes 
were considered in [16]. 



In this paper, we study properties of rank metric codes in 
general and MRD codes in particular. For codes with the 
rank metric, we first establish Gilbert and sphere-packing 
bounds, and then obtain the asymptotic forms of these two 
bounds and the Singleton bound. Based on these asymptotic 
bounds, we observe that MRD codes exceed the Gilbert- 
Varsharmov bound, and that asymptotically perfect codes 
(codes that attain the sphere-packing bound) do not exist. We 
also establish bounds on the rank covering radius of maximal 
codes, and show that all MRD codes are maximal codes and 
all MRD codes known so far achieve the maximum rank 
covering radius. The number of vectors with certain weights 
determines the security against decoding attacks of public -key 
cryptosystems based on error-control codes. We compare the 
distributions of rank and Hamming weights of vectors, and 
use the difference to partially explain why GPT cryptosystem 
and its variants are quite secure against decoding attacks. 

The rest of the paper is organized as follows. Section [H] 
reviews necessary backgrounds in an effort to make this paper 
self-contained. In Section [TO] we propose the Gilbert bound 
and the sphere-packing bound for codes with the rank metric 
and their asymptotic forms as well as the asymptotic form 
of the Singleton bound. Section IIVI establishes bounds on 
the covering radius of maximal codes with the rank metric, 
and shows that all the known MRD codes in the literature 
achieve the maximum rank covering radius. In Section [V] 
the distributions of rank and Hamming weights of vectors 
are compared and the difference partially explains why GPT 
cryptosystem and its variants are quite secure against decoding 
attacks. 



II. Preliminaries 



A. Rank metric 

Consider a = (a , oi, . . . , a n _i) G GY(q m ) n , 
the n-dimensional vector space over GF(q m ). Assume 
7o, 7i, . . . , 7 m _i is a basis set of GF(g m ) over GF(q), 
then for j = 0, 1, . . . , n — 1 dj can be written as aj = 
S^Lo a i,jlii where a^j G GF(g) for i = 0, 1, ... , m — 1. 
Hence, aj can be expanded to an m-dimensional column 
vector (ao,j, ai.j, ■ ■ ■ , a>m-i,j) w i tn respect to the basis set 
7o,7i, ■ ■ ■ , 7m-i- Let A be the m X n matrix obtained by 



expanding all the coordinates of a. That is, 
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where aj — YliLo a i,jli- The rank norm (over GF(g)) of the 
vector a, denoted as rk(&\GF(q)), is defined to be the rank of 

def 

the matrix A over GF[q), i.e., rfc(a|GF(g)) = rank(A) [8]. 
Accordingly, Va,b £ GF{q m ) n , d R (a,b) = rfc(a- b|GF(g)) 
is shown to be a metric over GF(q m ) n , referred to as the rank 
metric henceforth [8]. Hence, the minimum rank, distance d R 
of a code of length n is simply the minimum rank distance 
over all possible pairs of distinct codewords. Clearly, a code 
with a minimum rank distance d R can correct errors with rank 
uptot= L(4-1)/2J. 

B. The Singleton bound and MRD codes 

The minimum rank distance of a code can be specifically 
bounded. First, the minimum rank distance d R of a code over 
GF(q m ) is obviously bounded by m. Codes that satisfy d R = 
m were referred to as full rank distance codes and were studied 
in [14]. Also, it can be shown that d R < d H [8], where d H is 
the minimum Hamming distance of the same code. Due to the 
Singleton bound for block codes, the minimum rank distance 
of an (n, fc) block code over GF(q m ) thus satisfies 1 



d R < n 



1. 



(1) 



An alternative bound on the minimum rank distance is also 
given in [17]: 



d. < 



-(n-fc) 



1. 



(2) 



For n < m, the bound in Q is tighter than that in (0. When 
n > m the bound in (0 is tighter. Since I — (n — k) \ +1 < m 
and the equality holds only when 2^ < 1, the minimum rank 
distance of a code must satisfy: 



d R < min < n — k + 1 , 



>-*)J+l} 



(3) 



In this paper, we refer to the bound in as the Singleton 
bound 2 for codes with the rank metric, and call codes that 
attain the bound as maximum rank distance (MRD) codes. 
The Singleton bound for codes with the rank metric implies 
the rate-diversity tradeoff in [18]. 

Three subclasses of MRD codes have been proposed to 
our best knowledge. The first subclass of MRD codes, called 
Gabidulin codes, was first introduced in [8]. 

Definition 1 (Gabidulin codes): When n < m, let g = 
(go, gi, . . . , g n -{) be linearly independent elements of 

'For a nonlinear block code over GF(q m ) with length n and cardinality 
M, the Singleton bound is similar: d R < d H < n — [log„m M\ + 1. 

2 The Singleton bound in [2] has a different form since array codes are 
defined over base fields. 



GF(q m ). Then the code defined by the following generator 
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where [i] = q l , is called a Gabidulin code, generated by 
g = (go, gi, ... , g n -\), with dimension k and minimum rank 
distance d* = n — k + 1. 

A second subclass of MRD codes, referred to as generalized 
Gabidulin codes, was recently introduced in [15]. These codes 
have a similar generator matrix to that in @ except that for 
this subclass of codes [i] = q al with a being an integer prime 
to m. Even though Gabidulin codes are only a special case 
of generalized Gabidulin codes (for a = 1), we consider 
Gabidulin codes as a separate subclass since their properties 
have been studied more extensively. The third subclass of 
MRD codes consists of cartesian products of an MRD code 
with length n — m. Let C be an (n,k,d R = n — k + 1) MRD 
code over GF(q m ) (n < m), and let C' = C x . . . x C be 
the code obtained by I cartesian products of C. Thus, C l is an 
code with length n' = nl, dimension fc' = kl, and minimum 
rank distance d' R = d R = n — k + 1. It can be shown that C l is 
an MRD code if and only if n = m. The first two subclasses 
of MRD codes have length less than m, whereas this third 
subclass consists of codes with length n' = hn > m. 

III. Bounds for the rank metric 

A. Gilbert and sphere-packing bounds for the rank metric 

Let us denote the number of n-dimensional vectors with 
rank weight w over GF(<7 m ) as N q m(n, w), it is given by 



N q m(n,w) = Yl 



(q n - q i )(q m - q l ) 

(q w - q l ) ' 



(5) 



Denoting the volume of a ball of radius w (in the rank metric) 
in GF(q m ) n by V g m (n, w), we obtain 



V q m (n, w) 



J=0 



(6) 



Bounds on the parameters of codes indicate how good codes 
are, and also provide guidelines to the design of good codes. 
The Gilbert and sphere-packing bounds are two important 
bounds for codes in the Hamming metric [19], [20]. First, 
the Gilbert bound states that there always exists a code with 
A codewords, length n, minimum distance d such that A > 
v m\ n ri-i) • The sphere-packing bound, on the other hand, 
states that any code has to satisfy A < T/ £ ^ A , where 



t = [(d — 1)/2J. The derivations of these two bounds do not 
depend on the metric considered, and hence these two bounds 
can be easily adapted to codes with the rank metric. Let us 
denote the maximum number of codewords in a code of length 
n and minimum rank distance d R over GF(q m ) as A qm (n, d R ). 



The Gilbert and sphere -packing bounds for codes with the rank 
metric are given by 



< A i.. 

, g m(n,d R - 1) ~ 9 v '"'" ,Ky - V q m(n,t)' 

The Gilbert bound gives a lower bound to the cardinality of 
a "reasonably good" code for given block length and minimum 
distance. More formally, one can show that the Gilbert bound 
is always reached or exceeded by a special class of codes, 
called maximal codes. 

Definition 2 (Maximal code): A code C with length n and 
minimum rank distance d R is maximal if there does not exist 
any code C with same length and minimum rank distance 
such that CcC". 

We can show that 

Proposition 1: All MRD codes are maximal codes. 
Due to limited space, all proofs are omitted in this paper 
and they will be presented at the conference. Proposition ^ 
implies that Gabidulin codes, generalized Gabidulin codes, and 
cartesian products of MRD codes of length m are all maximal 
codes. However, it is not the case for all cartesian products of 
Gabidulin (or generalized Gabidulin) codes. Indeed, we can 
show that 

Proposition 2: Let C be an (n,k,d R ) MRD code over 
GF(q m ) (n < m). If I > ^ and d R > 1, then C l is not a 
maximal code. 

B. Asymptotic bounds for the rank metric 

The performance of codes of large block length can be 
studied in terms of asymptotic bounds on the relative minimum 
distance in the limit of infinite block length. In this section, 
we will study the asymptotic forms for the three bounds in 
and @ respectively in the case where both block length and 
minimum rank distance go to infinity. However, this cannot 
be achieved for finite m since the minimum rank distance 
is no greater than to. Thus, we consider the case where 
lim„_ +00 — — b, where b is a constant. 

Define 



• (n, 4) < 



(7) 



r def d R % / c\ def , . 

o = — and aid) = lim sup 

TL n— *-oo 



log m A qm (n, [Sn\ ) 



where a (S) represents the maximum possible code rate of a 
code which has relative minimum distance 6 as its length goes 
to infinity. The asymptotic forms of the bounds in Q are given 
in the propositions below. 

Proposition 3 (Gilbert-Varshannov bound): The 
asymptotic behavior of the Gilbert bound for the rank 
metric is given by (for < 5 < min{l, b^ 1 }) 



a(S) > (1 -<*)(!-&<$), 



(8) 



which will be referred to as the Gilbert- Varsharmov bound for 
the rank metric. 

Proposition 4 (Asymptotic sphere-packing bound): The 
asymptotic behavior of the sphere-packing bound for the rank 
metric is given by (for < 5 < min{l, 



a(5) < 



S 

l -2 



1 



4 



(9) 



The rank of an n x bn matrix is equal to the rank of 
its transpose. Hence, for a code C of length n and relative 
minimum distance 8 over GF(q b " ), the transpose code C T of 
length bn over GF(q n ) has relative minimum distance 6' = b5. 
Therefore, changing b into and S into bS will leave the 
bounds in l|8} and (|9jl unchanged. 

The Singleton bound for the rank metric in asymptoti- 
cally becomes 



a(6) < 



1 - 6 
1-bS 



if 6 < 1, 
if 6 > 1. 



(10) 



Bounds on a(5) vs 5, with n=m 



Sphere-packing 




Fig. 1. The sphere-packing, Singleton, and Gilbert- Varsharmov asymptotic 
bounds for the rank metric, with n = m. 



Bounds on a(5) vs S, with n=4m 




Fig. 2. The sphere-packing, Singleton, and Gilbert- Varsharmov asymptotic 
bounds for the rank metric, with n = Am. 

The three asymptotic bounds are illustrated in Figures ^ 
13 and |3 for b = 1,4, and 0.25, respectively. Insights about 
asymptotic behavior of codes in the rank metric can be 



Bounds on a(5) vs 5, with n=m/4 




Fig. 3. The sphere-packing, Singleton, and Gilbert- Varsharmov asymptotic 
bounds for the rank metric, with n = \m. 



obtained from these asymptotic bounds. First, note that for 

5 > the sphere-packing bound is always looser than the 
Singleton bound. In particular, when 6=1 and 6=1, then the 
right hand side of (|9jl is 1/4, although a(5) = 0. Since both 
the sphere-packing and Singleton bounds are upper bounds, 
this implies that the sphere-packing bound cannot be attained 
asymptotically. That is, asymptotically there are no perfect 
codes in the rank metric. This confirms the claim in [9] that 
there are no perfect codes for the rank metric. 

The values 0, 1, and oo are the special cases for b. When 

6 — > 0, the right hand sides of and QOj l coincide. This 
means that when m increases faster than linearly with n, then 
MRD codes do not exceed the Gilbert- Varsharmov. This is 
similar to the case where the Gilbert- Varsharmov bound for 
codes with the Hamming metric is reached but not exceeded 
by MDS codes. When b = 1, it can be shown that the gap 
between the Singleton bound and Gilbert- Varsharmov bound is 
maximized. When b — > oo, the bounds in l|8}, l|9), and dlO> are 
valid only at the point 6 = 0. This is because limn^oo =s < 
liniyj^oo — = 0. The presence of critical points for b — > and 
b — > oo confirms our choice of studying the case where the 
ratio — tends to a real numbered value. 

m 

Since there exist MRD codes for any value of 5, the 
bound in (llOt is attained by MRD codes. We note that the 
asymptotic code rates of MRD codes are always greater than 
(1— S)(l— bS) unless 6^0. Therefore, MRD codes exceed the 
Gilbert- Varsharmov bound for the rank metric unless 6^0, 
as illustrated in Figures ^ [2] and [3] 

Let us also study the asymptotic behavior of cartesian 
products of MRD codes. Let C be an (n, k, d R ) MRD code 
over GF(q m ) (n < m), and let C' = C x ... x C be 
the code obtained by I cartesian products of C with length 
n! = nl, dimension k' = kl, and minimum rank distance 
d' R = d R = n — k + 1. Clearly, we have k' = n! — l(d' R — 1). 



Thus, lim„^oo ^ = 1 - IS for < S < r 1 . Let us 
define b = lirrin^oo — , then we have l^ 1 < b~ l . Hence, 
C l reaches or exceeds the Gilbert- Varsharmov bound if and 
only if S < ^= 1 . We can show that when I > b + 1, C l 
does not attain the Gilbert- Varsharmov bound and hence is 
not asymptotically maximal for any S > 0. This confirms the 
result in Proposition [2] 

IV. Covering radius 

Let C be an (n, k) code over GF(q™ 1 ). The covering radius 
in the rank metric r(C) of this code is defined in [11] similarly 
to the covering radius in the Hamming metric. It is the smallest 
integer r such that all vectors in the space G¥{q m ) n are within 
rank distance r of some codeword. The covering radius is an 
important geometric property of a code: it is a measure of the 
maximum distortion if the code is used for data compression, 
and is the maximum weight of a correctable random error if 
the code is used for error correction [21]. 

A. General properties of the covering radius 

From the definition of the covering radius, it is clear that 
for any code C, r(C) < m. Also, if we further assume that 
C is linear, r(C) is bounded by n — k [11]. Similarly to 
the Hamming covering radius, the rank covering radius of a 
maximal code C satisfies r(C) < d(C) — 1. Combining this 
result with the Singleton bound for the rank metric in Q, we 
obtain that for any (linear or nonlinear) maximal code C, 

m . 



r(C) < min |n — k, — (n — k) j 



(11) 



Note that the bound in il It is not applicable to general codes 
with the rank metric. A trivial counter example is given by 
the (n, 1) repetition code with length n > m + 1, which has 
covering radius n — 1 [11] that exceeds the bound in il It . 

B. Covering radius of MRD codes 

If we assume that n < m, then il It becomes r(C) < n — k. 
In the following, we show that generalized Gabidulin codes 
have the maximum covering radius of n — k. The proof follows 
the same arguments used in the derivation of the Hamming 
covering radius of Reed-Solomon codes [21]. 

Definition 3: Let C\ C C2 be two codes. We denote by 
m(C2, Ci) [and M(C2, Ci)] the weight of the translate-leader 
of least [greatest] nonzero rank weight among the translates 
of Ci by elements of C2, i.e., 

™(C 2 ,Ci) = min {w(x + c) | c E Ci}, (12) 

xGC*2 — Ci 

M(C 2 ,Ci) = maxmin{w(x + c)|ceCi}. (13) 
XGC2 

When Ci and C 2 are linear, these are the minimum nonzero 
and maximum weights of cosets of C 2 mod Ci . 
We remark that Af(C 2 ,Ci) > m(C 2 ,Ci), and that if C 2 C 
C 3 , then M(C 3 ,Ci) > M(C 2) Ci). 

Lemma 1 (Supercode Lemma): Let Cl and C 2 be two lin- 
ear codes such that Ci C C 2 . Then r(Ci) > M(C 2 ,Ci) > 
m(C 2 ,Ci) > d(C 2 ). Also, 

r (Ci) > min |w(x)|. 

XGC2-C1 



Using Lemma \l\ we can show that generalized Gabidulin 
codes have maximal covering radius. 

Proposition 5: An (n,k,d R ) generalized Gabidulin code 
over GF(<2 m ) (m > n) has covering radius d R — 1 = n — k. 

A similar argument can be used to bound the covering radius 
of the cartesian products of generalized Gabidulin codes. 

Corollary 1: Let C be an (n,k,d R ) generalized Gabidulin 
code (n < to), and let C l be the (n' , k', d' R ) code obtained by 
I cartesian products of C. Then, VI > 1, the rank covering 
radius of C l satisfies r(C l ) > d' R — 1. 

Note that we do not have an equality as in Corollary [5] since 
cartesian products of MRD codes are not necessarily maximal, 
as stated in Proposition |2] However, when n = m, C l is an 
MRD code, therefore its covering radius also satisfies r(C l ) < 
d(G l ) — 1. This leads to the following result. 

Corollary 2: Let C be an (to, k, d R ) generalized Gabidulin 
code over GF(q m ), and let C l be the (n', k', d' R ) code obtained 
by I cartesian products of C. Then r(C l ) = d' R — 1 = ™{n' — 
k'). 

In summary, we conclude that all three subclasses of MRD 
codes known so far have maximal covering radius. Note that 
for the Hamming metric however, it is known that some MDS 
codes do not have maximal covering radius [21]. 

V. Rank weight distribution 

All public-key cryptosystems based on error codes encrypt 
the plaintext by first encoding it using the public code and 
then adding an error vector of weight t (see, for example, 
[4], [7] for details). Thus, a brute force decoding attack [7] 
can be used to break these cryptosystems: first guess the error 
vector of weight t, and then subtract the guessed error vector 
and invert the encoding process; the system is broken if the 
guessed error vector is the error vector used in the encryption 
operation, otherwise repeat with a different guess. Clearly, the 
work factor of such a decoding attack is proportional to the 
number of the vectors with weight t, N q ™(n,t). For codes 
with the rank metric, it is given in For codes with the 
Hamming metric, it is given by (q m — It can be shown 

that for < r < n the number of the vectors with the rank 
weight r is much greater than the number of the vectors with 
the Hamming weight r. The numbers of vectors with length 32 
and rank and Hamming weight r (0 < r < 32), respectively, 
over GF(2 32 ) are compared in Figure Thus, the public -key 
cryptosystems based on rank metric codes are more secure 
against this brute force decoding attack. This partially explains 
why the GPT cryptosystem and its variants are quite secure 
against decoding attacks. 
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